Squid accelerator + SSL update :
when client requests https page, Squid accel.(which has installed SSL certificate)
is able to see (by SSL update) http content of this one;
1) What's required reason allowing toSquid to see the HTTP content ?
after this stage what kind of request Accelerator does to remote server
?
2) https or http ?! I hope https.
3) If I was accelerate MS Windows Update site, I should have installed 2
SSL certificates ?! one in Squid accelerator and the another in Microsoft
Windows Update ?!
4) What's the difference between "THE SQUID CERTIFICATE" and that one inside
MS server ?!
5) Are Client and Squid accel. certificates only necessary to establish
first communication towards Accel. regardless MS W.U. , then Squid does
a "true" https request to remote server ?!
6) It's possible that Squid Accelerator NAT every https
request towards 443 port ?! Using FWTK TIS ?!
thanks again to all squid-users.
----- Original Message -----
From: "Henrik Nordstrom" <hno@squid-cache.org>
To: <sampei02@tiscali.it>
Cc: "Squid Users" <squid-users@squid-cache.org>; "Enr" <hno@squid-cache.org>
Sent: Tuesday, May 04, 2004 10:41 PM
Subject: Re: HTTPS accelerator
> On Tue, 4 May 2004 sampei02@tiscali.it wrote:
>
> > I'm not again sure if I can accelerator HTTPS server using squid accelerator
> > (2.5stable3) with SSL update Patch?
>
> You can.
>
> > I have to install SSL certficates on squid ?!
>
> Yes. To the user Squid is the SSL endpoint, not the web server. This is
> required to allow Squid see the HTTP content.
>
> Your other alternative is to provide direct plugs or NAT to the web
> server.
>
> Regards
> Henrik
>
__________________________________________________________________
Tiscali ADSL libera la velocita'!
Attiva Senza Canone entro il 17 maggio: navighi a 1,5 euro l'ora per i primi
3 mesi,se scegli il modem e' tuo in comodato gratuito e in piu' hai gratis
SuperMail per 12 mesi. Non aspettare, attivala subito!
http://abbonati.tiscali.it/adsl/prodotti/640Kbps/
Received on Mon May 10 2004 - 04:14:12 MDT
This archive was generated by hypermail pre-2.1.9 : Tue Jun 01 2004 - 12:00:01 MDT